SSH

agents ssh <name> connects to a registered device — it preflights reachability, picks the right shell for the platform, and authenticates from the device profile.

Interactive shell

With just a device name, you land in an interactive login shell:

agents ssh mac-mini

One-off command

Append a command and it runs on the device, then returns. The shell is chosen per platform — POSIX on macOS/Linux, PowerShell on Windows — so the same command shape works across the fleet:

agents ssh mac-mini uptime          # POSIX
agents ssh yosemite-s0 "df -h /"    # POSIX
agents ssh win-mini hostname        # PowerShell on Windows

Authentication

Devices come from the device registry. Key auth uses your SSH key. Password auth pulls the secret from a secrets bundle through an askpass shim — the password never touches argv.

Related

• Devices overview — the one-flag model.
• Register devices — where agents ssh reads its targets.
• Remote runs — offload an agent instead of an interactive shell.